Senior DWX Microsoft Engineer

Group 1001 is a consumer-centric, technology-driven family of insurance companies on a mission to deliver outstanding value and operational performance by combining financial strength and stability with deep insurance expertise and a can-do culture. Group1001’s culture emphasizes the importance of collaboration, communication, core business focus, risk management, and striving for outcomes. This goal extends to how we hire and onboard our most valuable assets – our employees. Why This Role Matters: We're looking for a Senior Microsoft Engineer who lives at the intersection of deep technical mastery and genuine user obsession. You'll own our endpoint platform and the broader M365 ecosystem — the technology our people touch every single day — and you'll be the engineer who makes sure that experience is fast, secure, modern, and effortless. This isn't a keep-the-lights-on role. We need a true technologist: someone who reads release notes for fun, follows the threat landscape, experiments with AI on weekends, and believes automation isn't a project — it's a posture. The endpoint is where our business meets technology. Every advisor conversation, every policy issued, every claim adjudicated — it all flows through the devices and platforms you'll own. We're investing in this role because we believe a world-class digital workplace is a competitive advantage, not a cost center. We need an engineer who believes the same thing and has the chops to prove it. related knowledge, skills, and experience. How You'll Contribute: You will be the platform owner for endpoint at our firm — the engineer accountable for how every device is provisioned, secured, managed, and retired. Intune, Autopilot, Defender for Endpoint, Entra ID, Configuration Manager where it still matters, and the full M365 suite (Teams, Exchange Online, SharePoint, OneDrive, Purview) all fall within your scope. You'll set the standard for how we deploy, patch, harden, and evolve these platforms. You'll engineer with modern discipline. CI/CD pipelines for configuration and policy deployment, Git-based source control for everything that can be expressed as code, PowerShell and Graph API automation woven through the stack, and infrastructure-as-code practices applied to the digital workplace. You'll treat endpoint engineering the way platform teams treat production systems — with versioning, testing, peer review, and observability. You'll embed AI and automation into the fabric of how DWX operates. Whether that's Copilot rollout and governance, AI-assisted troubleshooting, intelligent device health analytics, or automation that retires manual toil before it becomes someone's job — you'll be the engineer pulling these capabilities forward, responsibly and with measurable impact. You'll own endpoint security in partnership with Cybersecurity. Hardening baselines, conditional access, attack surface reduction, zero trust posture, vulnerability remediation, and the operational rigor to keep our fleet defensible against a threat landscape that doesn't sleep. You'll know which CVE matters this morning and what to do about it before it becomes Friday's incident. Who You'll Work With: You'll partner deeply across the technology organization: Networks on connectivity, identity, and zero trust; Cybersecurity on threat response, baselines, and compliance; Architecture on platform strategy and long-horizon decisions; Product Management on roadmap and prioritization; and stakeholders and end users on the experience itself — because the user is the epicenter of every decision you make. The best engineers in this seat are equally credible explaining a Conditional Access design to a security architect and walking a frustrated end user through a fix without making them feel small. What We're Looking For: You've spent 7+ years engineering Microsoft platforms in regulated environments — L&A, insurance, or financial services preferred. You have expert-level command of Intune, Autopilot, Entra ID, and the M365 administrative stack. Your PowerShell is fluent, your Graph API usage is comfortable, and you've built real CI/CD pipelines for endpoint and M365 workloads using Azure DevOps, GitHub Actions, or equivalent. Git is muscle memory. You have a working command of endpoint security: Defender for Endpoint, attack surface reduction, BitLocker, Credential Guard, application control, and the principles behind zero trust. You understand identity as the new perimeter and can engineer accordingly. You stay current. You follow industry voices, read the Microsoft tech community, track CVEs that affect your stack, and have informed opinions on where AI is heading and what it means for the digital workplace over the next 24 months. You bring those opinions back into your work — not as hype, but as a thoughtful, measured pull toward what's next. Above all, you keep the user at the center. You measure your success not in tickets closed or policies deployed, but in whether the people across our L&A and financial services businesses feel like their technology is quietly, reliably excellent — and getting better every quarter. Compensation: Our compensation reflects the cost of labor across several U.S. geographic markets. The base pay for this position ranges from $180,000/year in our lowest geographic market up to $230,000/year plus bonus in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Benefits Highlights: Employees who meet benefit eligibility guidelines and work 30 hours or more weekly, have the ability to enroll in Group 1001’s benefits package. Employees (and their families) are eligible to participate in the Company’s comprehensive health, dental, and vision insurance plan options. Employees are also eligible for Basic and Supplemental Life Insurance, Short and Long-Term Disability. All employees (regardless of hours worked) have immediate access to the Company’s Employee Assistance Program and wellness programs—no enrollment is required. Employees may also participate in the Company’s 401K plan, with matching contributions by the Company. Group 1001 , and its affiliated companies, is strongly committed to providing a supportive work environment where employee differences are valued. Diversity is an essential ingredient in making Group 1001 a welcoming place to work and is fundamental in building a high-performance team. Diversity embodies all the differences that make us unique individuals. All employees share the responsibility for maintaining a workplace culture of dignity, respect, understanding and appreciation of individual and group differences. #LI-AS1 #LI-REMOTE